Devansh-Webkul

**Name of the Vulnerable Software and Affected Versions** Bagisto versions prior to 2.3.10 **Description** Bagisto, an open source Laravel eCommerce platform, is susceptible to server-side template injection. A normal customer, during the address addition step of an order, can inject a value that executes within the admin view, potentially leading to remote code execution. **Recommendations** Update to version 2.3.10 or later.

**Name of the Vulnerable Software and Affected Versions** Bagisto versions prior to 2.3.10 **Description** Bagisto, an open source Laravel eCommerce platform, is susceptible to server-side template injection through the `type` parameter. This can potentially lead to remote code execution. **Recommendations** Update to version 2.3.10 or later.